Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa
File:                     ee65ad11-73c6-378b-9f9e-179df4feaa37.roa (raw, json)
Hash identifier:          vbAK2k3ZxdmBo0DhEh4Uu7DIeBoc1NvFbeKFLPwUSJM=
Subject key identifier:   57:7A:E9:DE:77:9F:75:FE:52:0A:4C:BA:4D:8F:72:43:B9:6E:0A:89
Certificate issuer:       /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial:       010D0C9F4328584585732E1A5AD22CB2293D50C0
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     399864
IP address blocks:        45.41.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2e:1a:5a:d2:2c:b2:29:3d:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=04da239c-5be0-4d3a-90fe-7aebced63614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:6f:22:4c:d6:ad:c3:f0:f9:75:f2:d3:4d:
                    df:41:6f:82:8e:80:5b:29:af:98:49:4c:c8:57:4e:
                    c4:d3:8e:c9:c9:6a:6a:67:47:28:3a:2f:ea:f0:94:
                    a3:d2:01:ba:b8:8c:97:2d:1a:5f:9c:e2:c7:96:df:
                    cf:eb:72:0f:a9:30:22:ad:71:f9:d6:23:c0:56:bf:
                    2f:e8:ab:dc:a7:cf:9d:0c:1a:01:8b:33:b6:07:e0:
                    3e:ab:2e:f4:7d:8d:16:79:91:09:3a:59:90:02:30:
                    0f:e8:0e:b0:25:ba:76:8f:55:57:19:ea:33:11:17:
                    10:a8:00:06:75:99:70:23:36:5f:a8:f9:5f:6d:9b:
                    f0:b1:df:56:ba:30:9c:e7:90:a1:d4:49:4b:b1:41:
                    a3:9c:f6:26:dc:0c:00:8f:9b:24:07:cb:7a:87:67:
                    90:ad:3b:c6:e4:eb:17:22:fa:49:42:2c:76:13:c1:
                    95:c6:4a:79:8c:9c:be:6c:8b:52:7a:50:19:f5:94:
                    5e:82:e0:e0:8d:10:cb:c8:81:c2:86:4a:2d:b8:0f:
                    b6:52:c2:5e:a5:d4:f3:29:ce:28:a2:c3:56:53:43:
                    5b:3e:60:f8:2b:9d:37:b2:77:ad:fa:08:ba:5d:ae:
                    8a:ed:6e:e6:b3:be:b2:54:b3:20:86:10:46:f3:96:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:E9:DE:77:9F:75:FE:52:0A:4C:BA:4D:8F:72:43:B9:6E:0A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl

            X509v3 Authority Key Identifier:
                keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:bc:8b:24:46:37:0a:4b:13:e2:2c:50:8e:ae:2d:33:59:
         9b:e3:31:b4:88:ae:72:83:a7:ee:fc:54:d1:8b:09:25:61:ae:
         de:73:68:52:10:8f:3d:26:6e:20:d4:ed:f0:e7:4a:17:7a:64:
         76:4c:14:29:04:0b:f4:f3:07:6e:74:c2:f2:73:b4:00:c6:a3:
         83:7c:ea:45:3a:c3:15:c6:16:6f:68:e3:79:5d:46:ce:84:21:
         ee:dc:c1:86:65:58:7e:b0:6d:44:cc:8a:d7:fb:1b:6c:0b:a3:
         ad:b0:14:6b:a0:2d:f2:0f:5f:41:95:50:d6:b6:a4:4c:52:9f:
         e2:12:45:c8:3e:73:bb:6b:09:af:52:23:72:1d:28:67:4a:c3:
         ca:26:ca:b3:3f:ea:62:d7:db:9f:d0:39:bd:a2:5b:f7:42:88:
         02:99:8b:f1:60:52:51:8f:ad:bd:e0:b8:e3:2c:0c:34:22:d8:
         01:23:6d:30:96:5c:85:1b:ed:71:7a:ff:ef:62:0d:07:f1:32:
         57:cf:a5:2c:eb:a1:7c:96:60:d8:bc:b3:49:a4:62:dc:6c:61:
         41:98:20:e4:9e:48:4d:a5:f1:31:d4:85:97:fe:d4:a5:0b:1d:
         3e:af:f6:5d:b7:ac:38:a5:d9:38:d3:44:06:78:b8:fc:8a:de:
         f7:2d:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:22:09 2024 by rpki-client on console-ams.rpki-client.org